Overview
This article discusses installing FTK & LAB 7.4.2 through 7.5.2.
For installing 7.6, use this guide: FTK & FTK Lab 7.6 Installation & upgrade Guide
Prerequisites
- Install all current Windows updates.
- Disable any antivirus/malware scanning software.
- A physical or virtual dongle with an FTK or LAB license
Notes
- If any part of the installation prompts to reboot the computer, you must reboot and start over from step 1 to ensure all components are installed.
- Since 7.x, multiple versions of FTK on the same system are no longer supported.
- The database upgrade process only works with 7.x databases. If you are upgrading from 6.x, you will need to backup the cases you want to retain and uninstall all 6.x versions prior to installing 7.x
Forensic Tools Installation
- Insert or mount the Forensic Tools 7.4.2 installation media and launch the autorun by right clicking and choosing "Run as Administrator".
- At the autorun menu, click Install Forensic Tools 64 Bit.
- At the AccessData Forensic Tools Suite installer Welcome dialog, click Next.
- At the License Agreement dialog, accept the license agreement and click Next.
- At the Setup Type dialog, select either FTK or Lab from the dropdown menu. For Enterprise 7.4.2, see this article.
- (Optional) If you chose LAB and have a Quin-C server installed on a remote machine that you'd like this installation to connect to, check Use remote Quin-C Server and enter the name/IP of your Quin-C server.
- Select whether you would like to perform a Default or Advanced installation.
Note: Default installations should only be done in single-box, single-drive environments.
“Default” Installation
- At the PostgreSQL License Agreement dialog, accept the license agreement and click Install.
Note: PostgreSQL will only be installed if it is not already on your system from a previous installation. - Wait for the installers to complete.
- At the final dialog, click Finish and continue to the Database Configuration section below.
“Advanced” Installation
- At the Custom Setup dialog, check which components to install and click Install.
- If you chose to install PostgreSQL, do the following during the AccessData PostgreSQL Setup:
- At the Destination Folder dialog, select the desired installation folder.
- At the Data Folder dialog, select the desired database storage folder. It's recommended to put the database Data Folder on its own drive, if possible.
- At the PostgreSQL Port dialog, choose the port that PostgreSQL should use.
- At the PostgreSQL User Create dialog, create a password for the PostgreSQL database administrator account.
- At the Destination Folder dialog, select the desired installation folder.
- If you chose to install the Evidence Processor, do the following during the AccessData Evidence Processing Enginesetup:
- At the Destination Folder dialog, select the desired installation folder.
- At the Processing Temp Folder and State Folder dialog, choose the folders where you’d like the temporary file stored. It's recommended to put the Processing Temporary Folder on its own drive, if possible.
- At the Destination Folder dialog, select the desired installation folder.
- If you chose to install the Forensic Tools, do the following during the AccessData Forensic Toolssetup:
- At the Configuration dialog, select the desired installation folder, database host, and Quin-C host.
- At the User Credentials dialog, enter the credentials for an account to run the Quin-C service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the Configuration dialog, select the desired installation folder, database host, and Quin-C host.
- If you chose to enable Quin-C UI, do the following during the AccessData Collabsetup:
- At the User Credentials dialog, enter the credentials for an account to run the Collab viewer service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the User Credentials dialog, enter the credentials for an account to run the Collab viewer service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the final dialog, click Finish, then reboot if prompted.
- Proceed to the correct Database Configuration section below.
Database Configuration
If this is the first Forensic Tools installation on this machine, or there's no existing database or cases, please follow the New Install section.
Very Important! Very Important! If you are upgrading from a previous version and have an existing database or cases, DO NOT follow the "New Install" steps below. Instead, scroll down further to the Upgrade section and follow those steps. |
New Install
- If the AccessData Database Configuration Tool window isn't already open, open DBConfig.exe as Administrator (typically located in "[drive]:\Program Files\AccessData\Forensic Tools\[version]\bin").
Note: If you did a New Default install, and there's already an existing "Default" entry listed in DBConfig, you should be able to skip to step 5. Your Application Administrator Username should be Administrator and the password should be abc123. - Click Add Configuration.
- Complete the following, then click Create:
Database Type: MSSQL or Postgres (This should be Postgres if you did a Default installation.)
Server Name : Port: Database location in the format host:port (Port is only needed when using a non-default port. This should be localhost if you did a Default installation.)
Create Database: True
Authentication Mode: Mode to authenticate to your database (This should be Database Authentication if you did a Default installation.)
System User: When using Database Authentication, this is the database user to use when authenticating (This should be postgres if you did a Default installation.)
System Password: When using Database Authentication, this is the database password to use when authenticating (This should be AD@Password if you did a Default installation.)
Application Admin: The desired username for your first FTK/LAB administrator.
Admin Password: The desired password for your first FTK/LAB administrator. - After the database is created, confirm the Default box is checked next to the entry for your new database.
- Close the AccessData Database Configuration Tool window and reboot your computer.
Upgrade
- If the AccessData Database Configuration Tool window isn't already open, open DBConfig.exe as Administrator (typically located in "[drive]:\Program Files\AccessData\Forensic Tools\[version]\bin").
- If your desired database is not already listed, click Add Configuration.
- Complete the following, then click Connect:
Database Type: MSSQL or Postgres
Server Name : Port: Database location in the format host:port (Port is only needed when using a non-default port.) - Highlight your desired database, and click Update Database.
- Select a backup path, set your authentication mode, and click Update.
- After the update completes, confirm the Default box is checked next to the entry for your desired database.
- Close the AccessData Database Configuration Tool window and reboot your computer.